Search Hit URL Modification for Secure Application Integration

• US 20070209080A1
• Filed: 02/28/2007
• Published: 09/06/2007
• Est. Priority Date: 03/01/2006
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Krishnaprasad, Muralidhar, Delgado, Joaquin, Ture, Mark
• Granted Patent: US 8,707,451 B2
• Time in Patent Office: Days
• US Class Current: 726/28
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A flexible and extensible architecture allows for secure searching across an enterprise. Such an architecture can provide a simple Internet-like search experience to users searching secure content inside (and outside) the enterprise. The architecture allows for the crawling and searching of a variety or sources across an enterprise, regardless of whether any of these sources conform to a conventional user role model. The architecture further allows for security attributes to be submitted at query time, for example, in order to provide real-time secure access to enterprise resources. The user query also can be transformed to provide for dynamic querying that provides for a more current result list than can be obtained for static queries.

Claims

1. A method for dynamically accessing secure content, comprising:

crawling a group of documents across an enterprise;

indexing each crawled document and storing a copy of a portion of each crawled document along with document metadata, the document metadata containing a generic link for at least one indexed document;

receiving a query from an authenticated user of the enterprise relating to the indexed document, the authenticated user having user security attribute values stored in the system;

sending a callback into a secure data source from which the indexed document was crawled, the callback including the user security attribute values; and

receiving an updated link that is built using the generic link and the user security attribute values, the updated link directing the user to results that are appropriate for the user at substantially the time of the query.

2. A method according to claim 1, further comprising:

crawling documents outside the enterprise.

3. A method according to claim 1, further comprising:

modifying the metadata for the indexed document as appropriate for the user at substantially the time of the query.

4. A method according to claim 1, wherein:

the updated link is an active and valid link for only the current user.

5. A method according to claim 1, wherein:

the generic link is not an active and valid link.

6. A method according to claim 1, wherein:

receiving an updated link includes receiving an updated link from a secure application wherein the updated link includes encoded information for the secure data source.

7. A method according to claim 3, wherein:

modifying the metadata includes at least one of modifying a title, text, and language of the indexed document.

8. A system for dynamically accessing secure content, comprising:

a search module including a crawler component operable to crawl a group of documents across an enterprise, the search module being further operable to index each crawled document and store a copy of a portion of each crawled document along with document metadata, the document metadata containing a generic link for at least one indexed document;

a query component operable to receive a query from an authenticated user of the enterprise relating to the indexed document, the authenticated user having user security attribute values stored in the system and accessible to the search module; and

a callback mechanism operable to send a callback into a secure data source from which the indexed document was crawled by the crawler component, the callback including the user security attribute values and information for the crawled document, the callback mechanism operable to receive an updated link from the secure data source that is built using the generic link and the user security attribute values, the search module operable to return the updated link to the user whereby the user is directed to results that are appropriate for the user at substantially the time of the query.

9. A system according to claim 8, further comprising:

an application programming interface operable to provide communication with the secure data source.

10. A system according to claim 8, wherein:

the crawler component is further operable to crawl documents outside the enterprise.

11. A system according to claim 8, wherein:

the callback mechanism is further operable to receive modified metadata for the indexed document as appropriate for the user at substantially the time of the query.

12. A system according to claim 8, wherein:

the updated link is an active and valid link for only the current user.

13. A system according to claim 8, wherein:

the generic link is not an active and valid link.

14. A system according to claim 8, wherein:

the updated link includes encoded information for the secure data source.

15. A system according to claim 11, wherein:

the modified metadata includes at least one of a title, text, and language of the indexed document.

16. A computer program product for dynamically accessing secure content, comprising:

program code for crawling a group of documents across an enterprise;

program code for indexing each crawled document and storing a copy of a portion of each crawled document along with document metadata, the document metadata containing a generic link for at least one indexed document;

program code for receiving a query from an authenticated user of the enterprise relating to the indexed document, the authenticated user having user security attribute values stored in the system;

program code for sending a callback into a secure data source from which the indexed document was crawled, the callback including the user security attribute values; and

program code for receiving an updated link that is built using the generic link and the user security attribute values, the updated link directing the user to results that are appropriate for the user at substantially the time of the query.

17. A computer program product according to claim 16, further comprising:

program code for crawling documents outside the enterprise.

18. A computer program product according to claim 16, further comprising:

program code for modifying the metadata for the indexed document as appropriate for the user at substantially the time of the query.

19. A computer program product according to claim 16, further comprising:

program code for receiving an updated link includes receiving an updated link from a secure application wherein the updated link includes encoded information for the secure data source.

20. A computer program product according to claim 18, further comprising:

program code for modifying the metadata includes program code for modifying at least one of a title, text, and language of the indexed document.